Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
File:                     mQYOLer_6n1iLdkVgP-QFfJVdYs.mft (raw, json)
Hash identifier:          lv6DtF2JY+cqVIueSIKv2OtVBAFaYGm5JOxOhul68fI=
Subject key identifier:   8E:6C:48:F7:2E:EE:51:67:34:AB:54:15:B9:CF:D0:FB:8A:7D:A2:FA
Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
Certificate issuer:       /CN=99060e2deaffea7d622dd91580ff9015f255758b
Certificate serial:       0193568A2B4D610D966252D0600A42CBEFE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
Manifest number:          03A2
Signing time:             Sat 23 Nov 2024 01:01:55 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:55 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:55 +0000
Files and hashes:         1: 1-utkbSuESXzjipC5RuSg8MwJNIA.roa (hash: SbUzzkQcw/mbAnyREOSU084cYTiUNMSz8NOn/2JQAa0=)
                          2: mQYOLer_6n1iLdkVgP-QFfJVdYs.crl (hash: 4L5pvniFJQZQ/LFfGT8duMQqGMQCqKCoIXXwgZD5eX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:2b:4d:61:0d:96:62:52:d0:60:0a:42:cb:ef:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b
        Validity
            Not Before: Nov 23 01:01:55 2024 GMT
            Not After : Nov 24 01:01:55 2024 GMT
        Subject: CN=8e6c48f72eee516734ab5415b9cfd0fb8a7da2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:48:4e:5d:62:3c:3b:dc:6c:b6:3e:cc:3e:
                    e2:ba:eb:9c:1a:1b:c4:a3:64:45:47:a7:12:ff:93:
                    fa:ce:33:4b:e9:4d:8e:aa:dc:41:c0:d1:71:14:45:
                    93:80:0d:8d:f0:e0:d8:98:c0:e8:2b:1d:8f:45:bc:
                    e2:b7:bb:40:47:b1:11:72:3d:f8:03:31:4e:91:bb:
                    01:46:9c:83:11:f1:40:7e:53:28:d7:40:9c:fb:93:
                    23:32:a8:90:a5:fc:e2:c7:cc:47:7b:a7:15:00:1f:
                    6c:3d:08:bc:27:94:03:5a:75:af:98:b0:ae:1b:66:
                    ae:31:a3:28:a7:9b:fb:60:1c:c8:65:ea:08:3b:76:
                    6c:2f:09:7b:f9:2d:11:4e:78:57:3e:24:a0:11:3b:
                    a9:c0:45:ce:59:a0:47:ee:0a:98:6f:72:e1:58:96:
                    90:1e:ac:c6:3d:59:03:a8:27:44:40:8c:13:88:26:
                    75:6e:e4:28:cc:4d:1d:cd:a3:5b:7b:99:e8:c1:33:
                    df:2a:05:32:92:34:96:e6:eb:86:71:58:17:62:17:
                    1f:c1:5d:4e:77:a6:74:29:28:c6:5b:7b:39:51:e5:
                    9e:10:e3:0c:ad:2a:a4:df:3f:d9:c6:e3:1a:a5:fc:
                    c6:37:da:92:92:2f:36:3f:2f:4c:3a:8f:41:24:06:
                    0d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6C:48:F7:2E:EE:51:67:34:AB:54:15:B9:CF:D0:FB:8A:7D:A2:FA
            X509v3 Authority Key Identifier:
                keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:86:ae:24:a3:73:36:cc:cb:18:24:ee:33:61:39:b1:32:e3:
         a0:e5:67:f8:a2:a0:6c:a8:b3:d1:17:2d:86:01:27:60:f2:68:
         46:df:5b:e4:a3:07:3d:64:90:a7:23:02:35:c7:97:67:36:b1:
         ba:07:24:ea:9e:60:11:53:16:44:20:95:11:e5:a2:18:96:e9:
         92:a0:cc:79:81:58:ff:f9:64:f7:83:81:1d:99:b6:c5:76:f9:
         f6:41:22:75:d0:b9:56:d8:03:40:6d:16:4c:20:9a:4f:f9:7d:
         94:91:58:73:57:96:c2:7b:8b:25:9d:36:39:87:72:ec:32:01:
         a7:81:b1:93:07:08:2c:33:fb:a1:31:f8:f7:4f:39:da:81:2d:
         6d:33:06:03:32:47:1c:77:4b:39:b2:a7:f6:78:32:a0:77:fd:
         63:15:3c:33:35:5b:cc:40:e6:6d:26:8d:de:a6:ff:9f:1c:b6:
         88:e0:05:49:65:3c:82:e9:d5:a1:c8:b9:ae:29:03:2e:6a:11:
         86:e1:55:09:a4:61:e8:39:56:ce:16:e0:ea:3e:66:d1:33:7c:
         de:c2:c3:36:47:40:55:97:2d:24:f3:48:6f:97:38:56:26:32:
         96:4c:e4:de:36:4a:ae:c3:20:d4:64:3f:5c:8a:9c:11:c1:14:
         3a:21:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:52 2024 by rpki-client on console-fra.rpki-client.org